Login Request a demo
PH
Product
Phpmailer
by Phpmailer Project · last CVE Jun 17, 2021
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 3High 4Medium 2Low 0
Severity
All severities10Critical3High4Medium2Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Phpmailer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-10033
In wildKEV
9.8
100%
Dec 30
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
Affected: before 5.2.18
CVE-2020-36326
9.8
3%
Apr 28
PHPMailer 6.1.8 through 6.4.0 allows object injection through Phar Deserialization via addAttachment with a UNC pathname
Affected: 6.1.8 through 6.4.0
CVE-2016-10045
9.8
98%
Dec 30
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging…
Affected: before 5.2.20
Showing 3